| | |
| | | import ( |
| | | "basic.com/dbapi.git" |
| | | "basic.com/pubsub/protomsg.git" |
| | | "basic.com/valib/logger.git" |
| | | "github.com/golang/protobuf/proto" |
| | | "github.com/knetic/govaluate" |
| | | "ruleprocess/logger" |
| | | "ruleprocess/ruleserver" |
| | | "ruleprocess/structure" |
| | | "strconv" |
| | | "time" |
| | | ) |
| | | |
| | | func Judge(msg ruleserver.ResultMsg) { |
| | | func PushSomthing(msg structure.ResultMsg) { |
| | | defer func() { |
| | | if err := recover(); err != nil { |
| | | logger.Error("事件推送模块儿的异常捕获:",err) |
| | | } |
| | | }() |
| | | start := time.Now() |
| | | // 装配成自己可以识别的数据 |
| | | label := new(Label) |
| | | label.DataFormatToLabel(msg) |
| | |
| | | timeFlag := timeJudge(label, ruleGroup) |
| | | if !timeFlag { |
| | | logger.Info("不在规则的时间范围内,不推送!") |
| | | return |
| | | continue |
| | | } |
| | | result := "" |
| | | var Connector string |
| | |
| | | expression, err := govaluate.NewEvaluableExpression(result); |
| | | if err != nil { |
| | | logger.Error("表达式有误,请检查!") |
| | | return |
| | | } |
| | | result, err1 := expression.Evaluate(nil) |
| | | if err1 != nil { |
| | |
| | | if result.(bool) { |
| | | logger.Info("通过规则,表达式为:", result) |
| | | // 推送服务器 |
| | | pushData(ruleGroup.Urls, msg) |
| | | pushData(ruleGroup.Urls, msg, start) |
| | | //os.Exit(1) |
| | | } else { |
| | | logger.Info("没通过规则,表达式为:", result) |
| | |
| | | expression, err := govaluate.NewEvaluableExpression("t1 < t2"); |
| | | if err != nil { |
| | | logger.Error("表达式有误,请检查!") |
| | | return false |
| | | } |
| | | parameters := make(map[string]interface{}, 8) |
| | | parameters["t1"] = time1 |
| | |
| | | logger.Info("-------打印底库规则公式:",formula) |
| | | if err != nil { |
| | | logger.Error("表达式有误,请检查!", formula) |
| | | //return "false" |
| | | return "false" |
| | | } |
| | | result, err1 := expression.Evaluate(nil) |
| | | if err1 != nil { |
| | |
| | | expression, err := govaluate.NewEvaluableExpression(formula); |
| | | if err != nil { |
| | | logger.Error("表达式有误,请检查!", formula) |
| | | //return "false" |
| | | return "false" |
| | | } |
| | | result, err1 := expression.Evaluate(nil) |
| | | if err1 != nil { |
| | |
| | | expression, err := govaluate.NewEvaluableExpression(formula); |
| | | if err != nil { |
| | | logger.Error("表达式有误,请检查!", formula) |
| | | //return "false" |
| | | return "false" |
| | | } |
| | | result, err1 := expression.Evaluate(nil) |
| | | if err1 != nil { |
| | |
| | | } |
| | | } else { |
| | | for _, def := range label.DefenceLevel { |
| | | formula := strconv.Itoa(int(def)) + rule.Operator + formate(rule.RuleValue) |
| | | formula := strconv.Itoa(int(def)) + rule.Operator + rule.RuleValue |
| | | logger.Info("-------打印布防等级规则公式:",formula) |
| | | expression, err := govaluate.NewEvaluableExpression(formula); |
| | | if err != nil { |
| | | logger.Error("表达式有误,请检查!", formula) |
| | | //return "false" |
| | | return "false" |
| | | } |
| | | result, err1 := expression.Evaluate(nil) |
| | | if err1 != nil { |
| | |
| | | } |
| | | |
| | | // 调用目标服务器的插入接口 |
| | | func pushData(urls []*protomsg.PushUrl, data ruleserver.ResultMsg) { |
| | | func pushData(urls []*protomsg.PushUrl, data structure.ResultMsg,start time.Time) { |
| | | for _, url := range urls { |
| | | logger.Debug("看看推送地址:",url.Url) |
| | | Push("tcp://192.168.1.123:40012", data) |
| | | bytes,err1 := proto.Marshal(data) |
| | | if err1 != nil { |
| | | logger.Info("序列化失败:",err1) |
| | | } |
| | | if _, ok := urlPool[url.Url] ; ok { |
| | | urlPool[url.Url] <- bytes |
| | | logger.Info("chan信息而: ", urlPool[url.Url],time.Since(start)) |
| | | } |
| | | logger.Info("chan信息以: ", urlPool[url.Url]) |
| | | |
| | | } |
| | | } |
| | | |